ALL4806W. 24 Ports Gigabit Web Smart Switch with 4 ports mini-gbic. User s Manual

Transcription

1 ALL4806W 24 Ports Gigabit Web Smart Switch with 4 ports mini-gbic User s Manual

2 Table of Contents Unpacking Information... 5 Introduction... 5 General Description...5 KeyFeatures...6 TheFront Panel...6 LEDs Definition...6 TheRear Panel...8 Installation... 9 Desktop Installation...9 Rack-mount Installation Installing Network Cables Functional Description ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ 11 JumboFrame Flow Control and Back Pressure Mirror VLAN Trunk (Aggregation) Quality of Service (QoS) SNMP Management guide Access the management interface of the Switch Manage the device via command line interface Manage the device via WEB browser System Port VLAN

3 PVID Aggregation1 Trunk Configuration LACP RSTP x IGMPSnooping Quality of Service Mirror RateLimit StormControl Statistics Overview Detailed Statistics LACPStatus RSTPStatus IGMPStatus Ping...37 WarmRestart FactoryDefault SoftwareUpload Product Specifications Appendix- Command Line Interface Start-up and Terminal configuration Login1Logout Procedures CommandHierarchy Entering Commands...41 Command Description System Commands Console Commands PortCommands

4 MAC Commands VLAN Commands Aggregation Commands LACP Commands RSTP Commands User Group Commands QoS Commands Mirror Commands IP Commands Dot1x Commands IGMP Commands Debug Commands

5 Unpacking Information Thank you for purchasing the 24-Port Gigabit Web Smart Switch with 4-Port mini-gbic. Before you start, please verify that your package contains the following items: 1. One 24-Port Gigabit Web Smart Switch with 4-Port mini-gbic. 2. One power cord. 3. Rack-mount brackets and screws (optional). 4. Manual CD. Introduction General Description Easily boosting your networking throughput, the 24-Ports Gigabit Web Smart Switch provides you 24 10/100/1000 Mbps gigabit ports that lead you to a real gigabit connection. Users are now able to transfer high bandwidth-demanded files faster and get a real efficiency improvement with the user-friendly Web-based management interface. This product also equips 4 mini GBIC slots for your flexible fiber connection. Use of the mini-gbic port disables the connection of its corresponding copper port automatically. The management functionalities provide efficient network usage. VLAN reduces the collisions from widely broadcasting. Port Aggregation enlarges the bandwidth of backbone connection. QoS is supported to secure the bandwidth for some bandwidth-demanded applications including VoIP or videoconference. The 802.3x and backpressure flow control mechanisms are also supported to ensure the correctness of data transmitting. 5

6 Key Features 24 fixed 10/100/1000 Mbps Gigabit Ethernet ports for easy network connecting application. Equips 4 SFP ports for optional fiber connection. Supports auto-detection for mini-gbic module inset. Supports Port Mirror. Supports 8 groups aggregation. Supports QoS function, tag base, DSCP priority. Supports Rate Limit (ICMP Rate, Broadcast Rate, Multicast Rate, Ingress1Egress Rate). Supports full duplex flow control and half duplex back pressure. Non-blocking wire-speed switching performance. Provides 8K MAC address entries and 16 groups VLAN table. Supports firmware upgrade, SNMP. Supports Jumbo frame 9600 bytes. Supports 500K bytes buffer Memory. Supports Web-based management interface. FCC, CE, VCCI Class A. Meet RoHS. The Front Panel The front panel consists of the ports and LED indicators. Please refer to the following paragraph for information. LEDs Definition LED for the device: The switch provides a power LED for the device. LED Status Operation Steady Green The switch is powered on Power Off The switch is powered off 6

7 LED for each port: The switch provides one "1000M" LED and one "10/100M" LED for each port. 000M LED: Shows the current transmitting1receiving speed of the port. 0/ 100M LED: Shows the link status and the activities on the port. LED Status Operation Green The port is connected at 1000 Mbps. A valid link is established, and there is data Blinking Green 000M transmitting1receiving. Off No valid link on this port or the port is connected at 10/100 Mbps. A valid link is established, and there is no data Steady Green transmitting1receiving. 0/ 100M A valid link is established, and there is data Blinking Green transmitting1receiving. Off No valid link on this port or the port is connected at 1000 Mbps. Attention : The Mini GBIC slot shares the same LED indicator with the last 4 RJ-45 (copper) ports. Port Operation The auto-negotiation feature allows those ports running at one of the following operation modes: Media Speed Duplex Mode 10 Mbps Full Duplex Half Duplex 10/100/1000 Mbps(copper) Full Duplex 100 Mbps Half Duplex 1000 Mbps Full Duplex 1000 Mbps(Fiber) (mini-gbic required) 1000 Mbps Full Duplex Note: For the last port, when both the fiber and cooper interfaces are connected, the system adapts the fiber interface and disables the relevant cooper port automatically. 7

8 Restore Default Button You can use this button to reset the switch or restore factory default settings. To reset the switch, press the button once. To restore factory default settings, press and hold the button for three seconds. The Rear Panel The rear panel of the switch: Power Receptacle To be compatible with the electric service standards around the world, the switch is designed to afford the power supply in the range from 100 to 240 VAC, Hz. Please make sure that your outlet standard to be within this range. To power on the switch, please plug the female end of the power cord firmly into the receptacle of the switch and the other end into an electric service outlet. After the power cord installation, please check if the power LED is lit for a normal power status. 8

9 Installation This switch can be placed on your desktop directly, or mounted in a rack. Please refer to the instructions for installation. Before installing the switch, we recommend: 1. The switch is placed with appropriate ventilation environment. A minimum 25 mm space around the unit is recommended. 2. The switch and the relevant components are away from sources of electrical noise such as radios, transmitters and broadband amplifiers 3. The switch is away from environments beyond recommend moisture Desktop Installation 1. Install the switch on a level surface that can support the weight of the unit and the relevant components. 2. Plug the switch with the female end of the provided power cord and plug the male end to the power outlet. Rack-mount Installation The switch may be standalone, or mounted in a rack. Rack mounting facilitate to an orderly installation when you are going to install series of networking devices. Procedures to Rack-mount the Switch: 1. Disconnect all the cables from the switch before continuing. 2. Place the unit the right way up on a hard, flat surface with the front facing you. 3. Locate a mounting bracket over the mounting holes on one side of the unit. 4. Insert the screws and fully tighten with a suitable screwdriver. 5. Repeat the two previous steps for the other side of the unit. 6. Insert the unit into the rack and secure with suitable screws (optional). 7. Reconnect all the cables. 9

10 Installing Network Cables 1. Crossover or straight-through cable: All the ports on the switch support Auto-MDI1MDI-X functionality. Both straight-through or crossover cables can be used as the media to connect the switch with PCs as well as other devices like switches, hubs or router. 2. Category 3, 4, 5 or 5e, 6 UTP/STP cable: To make a valid connection and obtain the optimal performance. An appropriate cable that corresponds to different transmitting1receiving speed is required. To choose a suitable cable, please refer to the following table. Media Speed Wiring 10 Mbps Category 3,4,5 UTP1STP 10/100/ Mbps Category 5 UTP1STP Mbps copper 1000 Mbps Category 5e,6 UTP1STP 1000 Mbps Fiber (mini-gbic required) 1000 Mbps The cable type differs from the mini-gbic you choose. Please refer to t h e i n s t r u c t i o n c a m e w i t h y o u r mini-gbic. 10

11 Functional Description Jumbo Frame With Jumbo Frame supported, it is allowed for the switch to transport identical data in fewer frames. Hence helps to ensure fewer overheads, shorten processing time, and reduce interruptions. Note: To enable Jumbo Frame, Flow Control should be enabled in advance. Flow Control and Back Pressure Flow Control and Back Pressure both contributes for lower and higher speed devices to communicate to each other hence ensures the correctness of data transmitting. The 802.3x flow control and Back Pressure mechanisms work respectively for full and half duplex modes. Flow Control can be enabled or disabled on a per-port basis. Mirror The Mirror function provides network administrator to monitor the traffic. By forwarding a copy of the packets that transferred by the monitored port, the sniffer port received all the packets and hence is able to monitor the traffic of the specified port. VLAN With VLAN supported, the network can be segmented in groups to reduce the collisions from widely broadcasting. The device supports both port-based VLAN and 802.1Q tag based VLAN. Port-based VLAN classifies incoming packets to VLANs according to their ingress port. The 802.1Q based VLAN add a tag to the header of the packet to classify their VLANs. Trunk (Aggregation) The Trunk functionality integrates several ports to enlarge the bandwidth that helps to boost the backbone connectivity. The switch allows the Maximum 8 groups for each group. Quality of Service (QoS) The QoS service classifies packets into different precedence. The packets are transmitted and received by their classified priorities. This mechanism helps high bandwidth demanded applications such as VoIP to get an unobstructed connection. SNMP This device is SNMP (Simple Network Management Protocol)-management supported. This allows this product to be monitored or inspected by a SNMP management station. 11

12 Management guide Access the management interface of the Switch This section instructs you how to enter and proceed with the advanced management capability, which can be accessed through console port or Internet Browser over the network (in-band). Manage the device via command line interface To start-up the command line interface, please connect a PC COM port to the RS-232 connector and activate a terminal emulation software (e.g. HyperTerminal of Windows.) The terminal emulation software should be started as the following configuration: 1. Data rate: baud. 2. Data format: 8 data bits, 1 stop bit and no parity. 3. Flow control: none. 4. Click the property icon, select settings, make sure that: "The Function, arrow, and ctrl keys act as": Terminal keys. "Emulation": VT100. Note: To manage via command line interface, please find the "Appendix" for more information. Manage the device via WEB browser To access the Web-based management interface, you should configure the management station with an IP address and subnet mask that compatible to your switch. The factory default value of the switch: IP: Subnet Mask: Default Gateway:

13 1. Running your Web Browser and enter the IP address " " in the Address field. 2. Key in the password admin (default value) to pass the authentication. Also, you can initialize the Password in the configuration of System. 3. After authentication procedure, the following page shows up, and then you may click the hyperlinks on the left side of each page to get access to each management functions. 13

14 System The System window provides the switch information and allows users to configure the switch properties. 14

15 MAC Address S1W Version H1W Version Active IP Address Active Subnet Mask Active Gateway DHCP Server Lease Time Left DHCP Enabled Fallback IP Address Fallback Subnet Mask Fallback Gateway Management VLAN Name Password Inactivity Timeout (secs) SNMP enabled SNMP Trap destination The MAC address of this device.. The software version of this device. The hardware version of this device. The current IP address of the switch The current Subnet Mask of the switch The current Gateway of the switch The IP Address of DHCP Server assign to client for managing network automatically The remaining lease time of IP Address that DHCP Server assign to the client Select it or not to obtain IP Address automatically Setup the IP address of the switch for fallback Setup the Subnet Mask of the switch for fallback Setup the Gateway of the switch for fallback The VLAN group that is allowed to access the WEB-based management interface. Defines the user-defined device name The Login password. (the Default value is blank or random value) The time of automatic broken network Select it or no to configure SNMP Network Management, which allows network administrators to monitor and configure this device with SNMP software. Specify a trap IP. A trap IP is the destination port for sending trap information, which is usually the IP address of network administrators. SNMP Read Community Fill in a name in the column, which is the password for accessing MIB with read-only authority. SNMP Write Community Fill in a name in the column, which is the password for accessing MIB with read-only authority. SNMP Trap Community Configure the type of SNMP Trap Community To save the configuration of the system, click "Apply" to save Note: After applying a new IP address, a new login page will be started automatically. Please login again to proceed to other configurations.

16 Port ItemsFunctions This Port Configuration page shows the link status of each port and allows users to configure speed, flow control for each port.

17 Items Functions Link Mode Flow Control Max Frame lenght Shows the link status of each port. The column lights green with the link speed while there is a valid connection on this port. Select a speed for this port. Auto Speed enables auto-negotation. Disable stop the port from functioning. Mark the checkbox to enable the FDX Flow control or unmark to disable. To adjust the size of Jumbo Frame. The length is 1518 bytes. The maximum value can be up to 9216 bytes. VLAN VLAN divides the network members into groups to reduce packets collisions and improve the network efficiency. The switch supports 802.1Q tag-based VLAN. This page shows up VLAN Configuration List, and you can follow the instructions to configure. To add new VLAN groups, 1. Fill in a VLAN id from 2 to 4094 in the "VLAN ID" column. Click "Add" to come into the page of "VLAN Setup"

18 VLAN group 1. Select the VLAN group, click "Modify", then setup the Port as the members of this VLAN group by clicking those marked checkboxes. Finally, click the "Apply" button to execute. 2. Select the VLAN ID of the VLAN you want in the VLAN Configuration List, then click Note: 1. When a port is configured to a specific VLAN group, a PVID that corresponding to the VLAN id will be assigned automatically to this port. (Ex, when you make port 3 of a VLAN with VLAN id "2", the PVID " 2 " will be assigned automatically to port 3) 2. Settings in VLAN, Port aggregation, and Mirror are correlative. Please make sure that the setting won't influence each other. 18

19 "Delete" 1 " Refresh" to clear1refresh this VLAN group.

20

21 PVID When the VLAN-enabled switch receives a tagged packet, the packet will be sent to the port's default VLAN according to the PVID (port VLAN ID) of the receiving port. Click "Port Config", the page of VLAN Per Port Configuration pops up. This page display when the switch is in Tag VLAN mode, the global setting of the ports will affect all Tag VLANs. It contains the following fields: Items Port VLAN aware Enabled Ingress Filtering Enabled Packet Type PVID Functions The switch Port Number 1L16124 Set or show the VLAN awareness mode for the port. VLAN aware ports will strip the VLAN tag from received frames and insert the tag in transmitted frames (except PVID). VLAN unaware ports will not strip the tag from received frames or insert the tag in transmitted frames. It determines how to process frames tagged for VLANs for which the ingress port is not a member. Tagged Only: block all un-tagged packets from accessing this port. All: all packets are allowed to access this port. while receiving an untagged frame from the port, the switch will assign a tag to the frame, using the PVID of the port as its VID. P o r t V L A N I D ( ) o r N o n e 19

22 Aggregation/ Trunk Configuration This page shows the aggregation groups and the aggregation mode. To set up the Port trunk groups, put the ports number into the same Aggregation group. There are eight groups to choose. Don't forget to click "Apply" to save the setting. 20

23 This switch supports both static trunking and dynamic Link Aggregation Control Protocol (LACP). LACP configured ports can automatically negotiate a trunked link with LACP-configured ports on another device. You can configure any number of ports on the switch as LACP, as long as they are not already configured as part of a static trunk. If ports on another device are also configured as LACP, the switch and the other device will negotiate a trunk link between them. In this page, you can make the protocol enabled or not, and configure the key value that is current administrative value of the Key for the protocol partner. The key number is between Auto means auto generated key 21

24 Rapid Spanning Tree Protocol (IEEE 802.1w) supports connections to RSTP nodes by monitoring the incoming protocol messages and dynamically adjusting the type of protocol messages the RSTP node transmits If RSTP is using 802.1D BPDUs on a port and receives an RSTP BPDU after the migration delay expires, RSTP restarts the migration delay timer and begins using RSTP BPDUs on that port. 22

25 23

26 System Priority Used in selecting the root device, root port, and designated port. The device with the highest priority becomes the STA root device. Hello Time Interval (in seconds) at which the root device transmits a c o n f i g u r a t i o n m e s s a g e Max Age The maximum time (in seconds) a device can wait without receiving a configuration message before attempting to reconfigure. All device ports (except for designated ports) should receive configuration messages at regular intervals. Forward Delay The maximum time (in seconds) the root device will wait before changing states (i.e., discarding to learning to forwarding). This delay is required because every device must receive information about topology changes before it starts to forward frames. Force Version There are two options as below: Normal, Compatible. Protocol Enabled Edge Path Cost Enable or disable the RSTP protocol on ports Expect the port to be an edge port (an end station) or a link to another STP device. Set the RSTP path cost on ports. Auto means auto g e n e r a t e d p a t h c o s t 24

27 802. 1x The IEEE 802.1X standard defines a port-based access control procedure that prevents unauthorized access to a network by requiring users to first submit credentials for authentication. When 802.1X is enabled, you need to configure the parameters for the authentication process that runs between the client and the switch (i.e., authenticator), as well as the client identity lookup process that runs between the switch and authentication server. These parameters are described in this section. 25

28 Mode Indicates if authentication is enabled or disabled on the p o r t. ( D e f a u l t : D i s a b l e d ) RADIUS IP Set the RADIUS server IP Address RADIUS UDP Port Set the RADIUS server network port RADIUS Secret Set the RADIUS encryption key Admin State Sets the authentication mode to one of the following options Auto - Requires a dot1x-aware client to be authorized by the authentication server. Clients that are not dot1x-aware will be denied access. Force-Authorized - Forces the port to grant access to all clients, either dot1x-aware or otherwise. (This is the default setting.) Force-Unauthorized - Forces the port to deny access to all clients, either dot1x-aware or otherwise. Port State Display the current status of authentication. Re-authenticate Sets the client to be re-authenticated after the interval specified by the Re-authentication Period. Re-authenticate can be used to detect if a new device is p l u g g e d i n t o a s w i t c h p o r t. Force Reinitialize Set this 802.1x configuration to initialize by compulsion. Statistics Display statistics for dot1x protocol exchanges for any p o r t. Click "Statistics", the following page of detailed info for each port pops up 26

29 Some other parameters would be indicated after click button "Parameters" as the following: Items Functions Reauthentication Set Reauthentication to be enabled or disabled on the Enabled p o r t. Reauthentication Set the time period after which a connected client must Period be re-authenticated. EAP timeout Set the time that an interface on the switch waits during an authentication session before re-transmitting an EAP p a c k e t. 27

30 IGMP Snooping You can configure the switch to forward multicast traffic intelligently. Based on the IGMP query and report messages, the switch forwards traffic only to the ports that request multicast traffic. This prevents the switch from broadcasting the traffic to all ports and possibly disrupting network performance. Items Functions IGMP When enabled, the switch will monitor network traffic to Enabled determine which hosts want to receive multicast traffic. Router Ports Set or show IGMP administrative router ports. Unregistered Set or show forwarding mode for unregistered (not-joined) IPMC IP multicast traffic. Will flood when enabled, and forward to Flooding router-ports only when disabled enabled VLAN ID ID of configured VLAN (1-4094). IGMP When enabled, it simply monitors the IGMP packets passing Snooping through it, picks out the group registration information, Enabled and c o n f i g u r e s t h e m u l t i c a s t f i l t e r s a c c o r d i n g l y. IGMP When enabled, the switch can serve as the Querier, which is Querying responsible for asking hosts if they want to receive Enabled multicast traffic. 28

31 Quality of Service QoS enhances the communication quality by giving different precedence to classified packets. This switch provides QoS Disabled, 802.1P and DSCP modes: Select the QoS Mode ( 1) p In IEEE 802.1p priority mode, when a switch port receives an untagged frame (a frame without priority tag), the port's default priority tag will be inserted into the frame before any other process. This page is revealed when the "IEEE p" mode is configured as shown below, Click on the drop list to specify priority levels, then click "Apply" to execute. 29

32 (2) DSCP This page is revealed when the "DSCP" mode is configured as shown below. The DSCP mode QoS gives packet priority by the types of the incoming packets. DSCP value's range is between 0 and 63. Give the priorities as normal1high1low for each precedence types, then click "Apply" to execute. 30

33 Mirror The Mirror function copies all the packets that are transmitted by the source port to the destination port. It allows administrators to analyze and monitor the traffic of the monitored ports. Mirror Configuration: 1. Select those ports that are going to be monitored by marking the checkboxes in "Monitor Source" column. 2. Click the drop list in "Mirror Port" column. Select a port as the administration port for monitoring those source ports. 3. Click "Apply" to activate. 31

34 Rate Limit This function allows the network manager to control the maximum rate for traffic transmitted or received on an interface. Rate limiting is configured on interfaces at the edge of a network to limit traffic into or out of the switch. Traffic that falls within the rate limit is transmitted, while packets that exceed the acceptable amount of traffic are dropped. This page allows users to limit the bandwidth for each port. To configure the Rate Limit: 1. Click on each drop list to specify a speed for each frame type. 2. Click the "Apply" button to execute your configuration. 32

35 Storm Control This "storm Control" page allows users to configure the rules for Storm Control. The allowed frame rates for ICMP frames, learn frames, multicasts, broadcasts and flooded unicasts are controlled using a central storm controller. Rate: Allowed values are 1k, 2k, 4k, 8k, 16k, 32k, 64k, or No limit. To perform storm control: 1. Click on each drop list to specify a speed for each frame type. 2. Click the "Apply" button to execute your configuration. Statistics Overview The Statistics Overview is provided for users to see the general transmitting and receiving status of each port. You may click the "Clear" button to clean all statistics or click the "Refresh" button to renew the statistics. 33

36 Detailed Statistics The Detailed Statistics is provided for users to see the detailed transmitting and receiving status of each Port. Please click the hyperlinks above to select a Port. You may also click the "Clear" button to clean all statistics or click the "Refresh" button to renew the statistics. 34

37 LACP Status LACP Status is provided for users to see the detailed LACP Aggregation status of each port. You may also click the " Refresh" button to renew the info. 35

38 RSTP Status RSTP Status is provided for users to see the detailed RSTP VLAN Bridge status for each port. You may also click the " Refresh" button to renew the info. Bridge ID - A unique identifier for this bridge, consisting of the bridge priority and MAC address (where the address is taken from the switch system). Hello time - Set or show the RSTP System Hello time. Number between 1-10 (default is 2) Maxage - Set or show the RSTP System Max Age. Number between 6-40 (default is 20) Fwd delay- Set or show the RSTP System Forward delay. Number between 4-30 (default is 15) 36

39 IGMP Status IGMP Status is provided for users to see the detailed status of each port. You may also click the "Refresh" button to renew the info. IGMP Querier: Set or Show IGMP querier state per VLAN. 37

40 Ping The ping function is to test the connectedness of the link between the switch and destination. Configure the following parameters, then click "Apply" to ping the connectedness. Target IP Address: Indicates the IP Address of the test destination. Count: Number of echo requests to send (default: 1). Timeout: Timeout in seconds to wait for each reply (default: 2). In the below table, it displays ping results contain Target IP Address 1Status 1 Received replies1 Request timeouts1average Response Time(in ms). 38

41 Warm Restart To restart the system, click the "Yes" button. The system restarts and shows the authentication window. Please fill in the username and password to continue. Factory Default Restore Factory Default: To restore the factory default value, click the Yes button. Note: The IP address of the device will also be configured as factory-default setting, which is Software Upload This "Software Upload" page allows users to upgrade firmware for this switch. To perform firmware upgrade: 1. Click the "Browse" button 2. Locate the firmware file 3. Click the "Upload" button to execute. 39

42 Product Specifications Standard Interface Cable Connections Network Data Rate Transmission Mode LED Indications IEEE BASE-T IEEE802.3u 100 BASE-TX IEEE802.3x full-duplex operation and flow control IEEE802.3ab1z 1000 BASE-T IEEE802.1Q VLAN interoperability IEEE802.1p Priority Operation 16124* Mbps auto MDI1MDI-X RJ-45 switching ports 4* SFP (mini-gbic) port 1 * Restore Default Button RJ-45 (10 BASE-T): Category 3,4,5 UTP1STP RJ-45 (100 BASE-TX): Category 5 UTP1STP RJ-45 (1000 BASE-T): Category 5e, 6 or enhanced UTP1STP Fiber: depend on mini-gbic types Mbps Auto-negotiation Mbps Full-duplex, Half-duplex 1000 Mbps Full-duplex System Power RJ-45 Port 1000M, M 8K MAC entries 500K Bytes Buffer Memory 9600 Bytes Jumbo Frame Emission Operating Temperature Operating Humidity Power Supply Memory FCC, CE, VCCI Class A, RoHS 0 40 C ( F) 10% - 90% (non-condensing) Internal power supply V Hz universal input 40

43 Appendix- Command Line Interface Start-up and Terminal configuration To start-up the command line interface, please connect a PC COM port to the RS-232 connector and activate a terminal emulation software (e.g. HyperTerminal of Windows). The terminal emulation software should be started as the following configuration: 1. Data rate: baud. 2. Data format: 8 data bits, 1 stop bit and no parity. 3. Flow control: none. 4. Click the property icon, select settings, make sure that: "The Function, arrow, and ctrl keys act as": Terminal keys. "Emulation": VT 100. Login/Logout Procedures To get access to the CLI, you will have to Key in the password to pass the authentication. The factory default value of Password is blank, or other random value. Note: We recommend users to configure a new password to prevent unauthorized users from accessing to the device. 41

44 Command Hierarchy After logging in, press? + <enter> to show the 9 command groups. Press? or help to get help. The help depends on the context: At top level, a list of command groups will be shown. At group level, a list of the command syntaxes will be shown. If given after a command, the syntax and a description of the command will be shown. Entering Commands To give any command, please key in your command and press enter. EX, 1. Type "System" and press <enter> to get access to the system command group. 2. Type "Configuration" and press <enter> to perform "configuration" System>configuration System Configuration: Name: S1W Version:

45 CVS Tag: sw_8051_2_34d Compile Date: Sep :26:36 H1W Version: 1.0 MAC address: SNMP: enabled Trap IP: Readcommunity: public Writecommunity: private Trapcommunity: public You can type "up" and press <enter> to go back to upper level. Command Description The following session introduces the command structure of the command line interface. Command groups: System - System commands Console - Console commands Port - Port commands MAC - MAC commands VLAN - VLAN commands Aggr - Aggregation commands LACP - IEEE 802.3ad Link Aggregation commands RSTP - IEEE 802.1w Rapid Spanning Tree commands User Group - User Group commands QoS - QoS commands Mirror - Mirror commands IP - IP commands Dot1x - Dot1x commands IGMP - IGMP Snooping commands Debug - Debug commands System Commands System Configuration [all] System Restore Default [keepip] System Name [<name>] System Reboot System SNMP [enableldisable] System Trap [<IP Address>] System Readcommunity [<community string>] System Writecommunity [<community string>] System Trapcommunity [<community string>] System Power Saving [fulllupldownldisable] 43

46 System Configuration [all] Show system name, software version, hardware version and management MAC address. Optionally show the full configuration [all]: Show the total switch configuration (default: System configuration only) System Restore Default [keepip] Restore factory default configuration. [keepip]: Preserve IP configuration (default: Not preserved). System Name [<name>] Set or show the system name. [<name>]: String of up to 16 characters (default: Show system name). System Reboot Reboot the switch. SNMP [enableidisable] Activate or deactivate the SNMP. [enableldisable]: Enable1disable SNMP (default: Show SNMP mode). Trap [<IP Address>] Set or show SNMP traps destination. <IP Address>: IP address to send traps to. (default: Show trap configuration) 44

47 Readcommunity [<community string>] Set or show SNMP read community string. [<community string>]: New community string. (default: Show current value). Writecommunity [<community string>] Set or show SNMP write community string. [<community string>]: New community string. (default: Show current value). Trapcommunity [<community string>] Set or show SNMP trap community string. [<community string>]: New community string. (default: Show current value). Sytem Power Saving [fulliupidownidisable] Configure mode of power saving. [fulllupidownidisable]: full : Power saving at both link-up and link-down. up : Power saving at link-up only. down : Power saving at link-down only. disable : No power saving 45

48 Console Commands Commands at Console level: Console Configuration Console Password [<password>] Console Timeout [<timeout>] Console Prompt [<prompt string>] Console Configuration Show configured console password and timeout. Console Password [<password>] Set or show the console password. The empty string ("") disables the password check. [<password>]: Password string of up to 16 characters. Console Timeout [<timeout>] Set or show the console inactivity timeout in seconds. The value zero disables timeout. [<timeout>]: Timeout value in seconds, 0, Console Prompt [<prompt_string>] Set or show the console prompt string. [<prompt_string>]: Command prompt string of up to 10 characters. 46

49 Port Commands Commands at Port level: Port Configuration [<portlist>] Port Mode [<portlist>] [<mode>] Port Flow Control [<portlist>] [enableldisable] Port State [<portlist>] [enableldisable] Port MaxFrame [<portlist>] [<framesize>ireset] Port Statistics [<portlist>] [clear] Port Excessive Collisions Drop [enableldisable] - #Note: If you want to change maxframe bigger than 1518, the [Flow Control] should be enabled! Port Configuration [<portlist>] Show the configured and current speed, duplex mode, flow control mode and state for the port. [<portlist>]: Port list (Default: All ports). Port Mode [<portlist>] [<mode>] Set or show the speed and duplex mode for the port. [<portlist>]: Port list (Default: All ports). [<mode>] : Port speed and duplex mode (Default: Show configured and current mode). 10hdx : 10 Mbit1s, half duplex. 10fdx : 10 Mbit1s, full duplex. 100hdx : 100 Mbit1s, half duplex. 100fdx : 100 Mbit1s, full duplex. 1000fdx: 1 Gbit1s, full duplex. auto : Auto negotiation of speed and duplex. Port Flow Control [<portlist>] [enableldisable] Set or show flow control mode for the port. [<portlist>] : Port list (default: All ports). [enableldisable]: Enable1disable flow control (default: Show flow control mode). 47

50 Port State [<portlist>] [enable/disable] Set or show the state for the port. [<portlist>] : Port list (default: All ports). [enableldisable]: Enable or disable port state (default: Show state). Port MaxFrame [<portlist>] [<framesize>lreset] Set or show the maximum frame size in bytes (including FCS) for frames received on the port. Tagged frames are allowed to be 4 bytes longer than the maximum frame size. Use the reset option to return to default setting. [<portlist>] : Port list (default: All ports). [<framesize>ireset]: Maximum frame size [ ] or reset to 1518 bytes (default: Show maximum frame size). Port Statistics [<portlist>] [clear] Show or clear statistics for the port. [<portlist>]: Port list (default: All ports). [clear] : Clear port statistics (default: Show statistics). Port Excessive Collisions Drop [enableldisable] Enable or disable drop of frames when excessive collisions occur in half duplex mode. [enableldisable]: Enable1disable frame drop (default: Show Excessive Collisions Drop mode). 48

51 MAC Commands Commands at MAC level: MAC Configuration MAC Add <macaddress> <portlist>inone [<vid>] MAC Delete <macaddress> [<vid>] MAC Lookup <macaddress> [<vid>] MAC Table <vidlist> MAC Flush MAC Agetime [<agetime>] MAC Configuration Show the permanently stored MAC table and the MAC ageing timer. MAC Add <macaddress> <portlist>lnone [<vid>] Add permanent MAC address and VLAN ID on ports. <macaddress>: MAC address, 12 digit hex string, optionally separated with dashes or colons (e.g ABCDEF or AB-CD-EF or 01:02:03:AB:CD:EF). <portlist> : Port list. Use "none" to specify no ports. [<vid>] : VLAN ID, (default: 1). MAC Delete <macaddress> [<vid>] Delete MAC address and VLAN ID. <macaddress>: MAC address, 12 digit hex string, optionally separated with dashes or colons (e.g ABCDEF or AB-CD-EF or 01:02:03:AB:CD:EF). [<vid>] : VLAN ID (default: All). MAC Lookup <macaddress> [<vid>] Lookup MAC address and VLAN ID. <macaddress>: MAC address, 12 digit hex string, optionally separated with 49

52 dashes or colons (e.g ABCDEF or AB-CD-EF or 01:02:03:AB:CD:EF). [<vid>] : VLAN ID, (default: 1). MAC table <vidlist> Show the MAC address table for VLAN ID list. <vidlist> : VLAN ID list. MAC Flush Removes non-locked entries from the switch MAC table. MAC Agetime [<agetime>] Set or show the MAC age timer in seconds. The value zero disables ageing. [<agetime>]: Age timer in seconds, 0 or (default: Show timer). 50

53 VLAN Commands Commands at VLAN level: VLAN Configuration [<portlist>] VLAN Add <vidlist> [<portlist>] VLAN Delete <vidlist> VLAN Lookup <vidlist> VLAN Aware [<portlist>] [enableldisable] VLAN PVID [<portlist>] [<vid>inone] VLAN Frame Type [<portlist>] [allltagged] VLAN Ingress Filtering [<portlist>] [enableldisable] VLAN Configuration [<portlist>] Show the VLAN aware mode, port VLAN ID and accepted frame type for the port and the permanently stored VLAN table. [<portlist>]: Port list (default: All ports). VLAN Add <vidlist> [<portlist>] Add VLAN entry and include ports in member set. <vidlist> : VLAN ID list. [<portlist>]: Port list (default: All ports). VLAN Delete <vidlist> Delete VLAN entry (all ports excluded from member set). <vidlist> : VLAN ID list. VLAN Lookup <vidlist> Lookup VLAN entry and show port list. <vidlist> : VLAN ID list. 51

54 VLAN Aware [<portlist>] [enableldisable] Set or show the VLAN awareness mode for the port. VLAN aware ports will strip the VLAN tag from received frames and insert the tag in transmitted frames (except PVID). VLAN unaware ports will not strip the tag from received frames or insert the tag in transmitted frames. [<portlist>]: Port list (default: All ports). [enableldisable]: Enable1disable VLAN awareness (default: Show awareness). VLAN PVID [<portlist>] [<vid>inone] Set or show the port VLAN ID. Untagged frames received on the port will be classified to this VLAN ID. Frames classified to this VLAN ID will be sent untagged on the port. [<portlist>]: Port list (default: All ports). [<vid>inone]: Port VLAN ID, (default: Show PVID). The 'none' option can be used for trunk links. VLAN Frame Type [<portlist>] [allitagged] Set or show the accepted frame type for the port. [<portlist>]: Port list (default: All ports). [allitagged]: Accept all or only tagged (default: Show frame type). VLAN Ingress Filtering [<portlist>] [enableldisable] Set or show VLAN ingress filtering for the port. [<portlist>]: Port list (default: All ports). [enableldisable]: Enable or disable VLAN ingress filtering (default: Show current setting). 52

55 Aggregation Commands Commands at Aggr level: Aggr Configuration Aggr Add <portlist> Aggr Delete <portlist> Aggr Lookup <portlist> Aggr Mode [smacldmaclxor] Aggr Configuration Shows the aggregation groups and the aggregation mode. Aggr Add <portlist> Add link aggregation group including ports. <portlist>: Aggregation port list. Aggr Delete <portlist> Delete link aggregation group. <portlist>: Port list. Aggregations including any of the ports will be deleted. Aggr Lookup <portlist> Lookup and display link aggregation group. <portlist>: Port list. Aggregations including any of the ports will be shown. Aggr Mode [smacidmaci&or] Set or show link aggregation traffic distribution mode. [smacldmaclxor]: Aggregation mode, SMAC, DMAC or XO R (default: Show mode). 53

56 LACP Commands Commands at LACP level: LACP Configuration [<portlist>] LACP Mode [<portlist>] [enableldisable] LACP Key [<portlist>] [<key>lauto] LACP Status LACP Statistics LACP Configuration [<portlist>] Show LACP configuration. [<portlist>]: Port list (Default: All ports). LACP Mode [<portlist>] [enableidisable] Enable or disable the LACP protocol on ports <portlist>. [<portlist>]: Port list (Default: All ports). [enableldisable]: Enable or disable. LACP Key [<portlist>] [<key>iauto] Set the LACP key on ports <portlist>. [<portlist>]: Port list (Default: All ports). [<key>]: Number between Auto means auto generated key LACP Status Show LACP group and port states. LACP Statistics Show LACP protocol port statistics. 54

57 RSTP Commands Commands at RSTP level: RSTP Configuration [<portlist>] RSTP sysprio [<sysprio>] RSTP hellotime [<secs>] RSTP maxage [<hops>] RSTP fwddelay [<secs>] RSTP version [normalicompat] RSTP Mode [<portlist>] [enableldisable] RSTP Aggr [enableldisable] RSTP Edge [<portlist>] [enableldisable] RSTP Pathcost [<portlist>] [<pathcost>lauto] RSTP mcheck <portlist> RSTP Status RSTP Statistics RSTP Configuration [<portlist>] Show RSTP configuration. [<portlist>]: Port list (Default: All ports). RSTP sysprio [<sysprio>] Set or show the RSTP System Priority. [<sysprio>]: Number between in increments of 4096 This provides for 16 distinct values: 0, 4096, 8192, 12288, 16384, 20480, 24576, 28672, 32768, 36864, 40960, 45056, 49152, 53248, and RSTP hellotime [<secs>] Set or show the RSTP System Hello time. [<secs>]: Number between 1-10 (default is 2) 55

58 RSTP maxage [<hops>] Set or show the RSTP System Max Age. [<hops>]: Number between 6-40 (default is 20) RSTP fwddelay [<secs>] Set or show the RSTP System Forward delay. [<secs>]: Number between 4-30 (default is 15) RSTP version [normalicompat] Set or show the RSTP protocol version to use. [<version>]: normal - use RSTP, compat - compatible with old STP RSTP Mode [<portlist>] [enableldisable] Enable or disable the RSTP protocol on ports <portlist>. [<portlist>]: Port list (Default: All ports). [enableldisable]: Enable or disable. RSTP aggr [enableldisable] Enable or disable the RSTP protocol on aggregated links. [enableldisable]: Enable or disable. RSTP edge [enableldisable] Expect the port to be an edge port (an end station) or a link to another STP device. [enableldisable]: End-station or bridge. 56

59 RSTP pathcost [<portlist>] [<pathcost>lauto] Set the RSTP pathcost on ports <portlist>. [<portlist>]: Port list (Default: All ports). [<pathcost>]: Number between Auto means auto generated pathcost RSTP mcheck <portlist> Force a recheck of the RSTP protocol on the ports in <portlist>. <portlist>: List of ports. RSTP Status Show RSTP bridge instances and port states. RSTP Statistics Show RSTP bridge instance and port statistics. 57

60 User Group Commands Commands at User Group level: User Group Configuration User Group Add <grouplist> [<portlist>] User Group Delete <grouplist> User Group Lookup <grouplist> User Group Configuration Show the user groups. User Group Add <grouplist> [<portlist>] Add user group entry including the ports. <grouplist> : User group ID list. [<portlist>]: Port list (default: All ports). User Group Delete <grouplist> Delete user group entry. <grouplist>: User group ID list. User Group Lookup <grouplist> Lookup user group entry and show port members. <grouplist>: User group ID list. 58

61 QoS Commands Commands at QoS level: QoS Configuration [<portlist>] QoS Mode [<portlist>] [taglportldiffserv] QoS Default [<portlist>] [<class>] QoS Tagprio [<portlist>] [<tagpriolist>] [<class>] QoS DiffServ [<dscpno>] [<class>] QoS Userprio [<portlist>] [<tagprio>] QoS Shaper [<portlist>] [enableldisable] [<rate>] QoS Policer [<portlist>] [enableldisable] [<rate>] QoS Storm Control [<traffic type>] [enableldisable] [<rate>] <class> range: lowinormallmediumihigh <traffic type>: ICMPILearn1BroadcastiMulticastiFlood Unicast QoS Configuration [<portlist>] Show the configured QoS mode, VLAN user priority mapping, default class, default VLAN user priority and DSCP mapping for the port. [<portlist>]: Port list (default: All ports). QoS Mode [<portlist>] [tagiportidiffserv] Set or show the QoS mode for the port. [<portlist>] : Port list (default: All ports). [tagiportldiffserv]: Enable tag, port or IP differentiated services class of service for the port (default: Show mode). QoS Default [<portlist>] [<class>] Set or show the default class. In tag mode, the default class is used for untagged frames. In port mode, the default class is used as the port priority. In diffserv mode, the default class is used for non-ip frames. [<portlist>]: Port list (default: All ports). [<class>] : Internal class of service (default: Show default class). 59

62 QoS Tagprio [<portlist>] [<tagpriolist>] [<class>] Set or show the VLAN user priority mapping. [<portlist>] : Port list (default: All ports). [<tagpriolist>]: VLAN user priority list, 0-7 (default: All user priorities). [<class>] : Internal class of service (default: Show class). QoS DiffServ [<dscpno>] [<class>] Set or show the IP Differentiated Services mapping. [<dscpno>]: IP DSCP number, 0-63 (default: All DSCP values). [<class>] : Internal class of service (default: Show class). QoS Userprio [<portlist>] [<tagprio>] Set or show the default VLAN user priority for received untagged frames. [<portlist>]: Port list (default: All ports). [<tagprio>] : VLAN tag user priority, 0-7 (default: Show user priority). QoS Shaper [<portlist>] [enableidisable] [<rate>] Set or show the shaper configuration. [<portlist>] [enableldisable] [<rate>] : Port list (default: All ports). : Enable or disable shaper. : Disable or set leaky bucket rate in Kbit1s [0k,128k,256k,384k,512k,640k,768k,896k,1024k,1152k,1280k 1408k,1536k,1664k,1792k,1920k,2048k,2176k,2304k,2432k 2560k,2688k,2816k,2944k,3072k,3200k,3328k,3456k,3584k 3712k,3840k,3968k] (default: Show shaper rate 0k is disable). QoS Policer [<portlist>] [disable I <rate>] Set or show the policer configuration. 60

63 [<portlist>] [enableldisable] [<rate>] : Port list (default: All ports). : Enable or disable policer. : Disable or set leaky bucket rate in Kbit1s [0k,128k,256k,384k,512k,640k,768k,896k,1024k,1152k,1280k 1408k,1536k,1664k,1792k,1920k,2048k,2176k,2304k,2432k 2560k,2688k,2816k,2944k,3072k,3200k,3328k,3456k,3584k 3712k,3840k,3968k] (default: Show policer rate 0k is disable ). QoS Storm Control [<traffic type>] [enableldisable] [<rate>] Set or show the storm control configuration. The allowed frame rates for ICMP frames, learn frames, multicasts, broadcasts and flooded unicasts are controlled using a central storm controller. [<traffic type>] [enableldisable] [<rate>] : Storm controller to set. Can be one of: [ICMP1Learn1Broadcast1MulticastIFlood Unicast] (default: Show all). : Enable or disable specified storm controller. : Frame rate in kiloframes Allowed values are 1k, 2k, 4k, 8k, 16k, 32k, 64k, 61

64 Mirror Commands Commands at Mirror level: Mirror Configuration Mirror Port [<port>] Mirror Source [<portlist>] [enableldisable] Mirror Configuration Show the mirror destination port and mirror mode for source ports. Mirror Port [<port>] Set or show the mirror destination port. [<port>]: Mirror destination port (default: Show mirror port). Mirror Source [<portlist>] [enableidisable] Set or show the source port mirror mode. [<portlist>] : Source port list (default: All ports). [enableldisable]: Enable1disable mirroring of frames received on port (default: Show mirror mode). 62

65 IP Commands Commands at IP level: IP Configuration IP Status IP Setup [<ipaddress> [<ipmask> [<ipgateway>]]] [<vid>] IP Mode [enableldisable] IP Ping [-n <count>] [-w <timeout>] <ipaddress> IP Arp IP Dhcp [enableldisable] IP Configuration Show IP configured IP address, mask, gateway, VLAN ID and mode. IP Status Show current IP status. IP Setup [<ipaddress> [<ipmask> [<ipgateway>]]] [<vid>] Setup or show IP configuration. [<ipaddress>]: IP address. (default: Show IP configuration) [<ipmask>] : IP subnet mask (default: Subnet mask for address class). [<ipgateway>]: Default IP gateway, (default: ). [<vid>] : VLAN ID, (default: 1). IP Mode [enableldisable] Activate or deactivate the IP configuration. [enableldisable]: Enable1disable IP (default: Show IP mode). IP Ping [-n <count>][-w <timeout>] <ipaddress> Ping the specified IP address. [-n <count>]: Number of echo requests to send (default: 1). [-w <timeout>]: Timeout in seconds to wait for each reply (default: 2). 63

66 IP Arp Show the content of the ARP table. IP DHCP [enableldisable] Activate or deactivate the DHCP protocol. [enableldisable]: Enable1disable DHCP (default: Show DHCP mode). 64

67 Dotix Commands Commands at Dot1x level: Dot1x Configuration Dot1x Mode [enableldisable] Dot1x State [<portlist>] [Auto1ForceAuthorized1ForceUnauthorized] Dot1x Server [<IP Address>] Dot1x UDP Port [<value>] Dot1x Secret [<Shared Secret>] Dot1x Statistics [<portlist>] Dot1x Reauthenticate [<portlist>] [now] Dot1x Parameters [<parameter>] [<value>] Dotix Configuration Show current 802.1X configuration. Dotix Mode [enableidisable] Enable or disable 802.1X process for the switch. [enableldisable]: new mode (default: Show current configuration). Dotix State [<portlist>] [AutoIForceAuthorizedIForceUnauthorized] Set or show the 802.1X state for the port. [<portlist>] : Port list (default: All ports). [Auto1ForceAuthorized1ForceUnauthorized]: Set 802.1X state for the ports. (default: Show mode). Dotix Server [<IP Address>] Set or show RADIUS server IP address. [<IP Address>]: IP address of external RADIUS server. (default: Show current configuration) 65

68 Dotix UDP Port [<value>] Set up UDP Port for the external RADIUS server. [<value>]: The UDP port the RADIUS server listens to (default: Show current configuration). Dotix Secret [<Shared Secret>] Set or show the secret shared with the RADIUS server. [<Shared Secret>]: Shared secret shared with external RADIUS server. (default: Show current configuration) Dotix Statistics [<portlist>] Show 802.1X statistics for the port. [<portlist>]: Port list (default: All ports). Dotix Reauthenticate [<portlist>] [now] Refresh (restart) 802.1X authentication process for the port by setting reauthenticate TRUE. [<portlist>]: Port list (default: All ports). [now]: if specified, force re-authentication immediately. Dotix Parameters [<parameter>] [<value>] Set up advanced 802.1X parameters. [<parameter>]: Parameter to change. [<value>]: New value for the given parameter. 66

69 IGMP Commands Commands at IGMP level: IGMP Configuration IGMP Status IGMP Groups <vidlist> IGMP Mode [enableldisable] IGMP State <vidlist> [enableldisable] IGMP Querier <vidlist> [enableldisable] IGMP Router ports [<portlist>] [enableldisable] IGMP Unregistered Flood [enableldisable] Ratelimit Configuration IGMP Configuration Show the IGMP configuration. IGMP Status Show the IGMP operational status and statistics. IGMP Groups <vidlist> Show IGMP groups for given VLANs. IGMP Mode [enableldisable] Set or show global IGMP mode. (default: Show current mode) IGMP State <vidlist> [enableldisable] Set or Show IGMP state per VLAN. (default: Show IGMP state) IGMP Querier <vidlist> [enableldisable] Set or Show IGMP querier state per VLAN. (default: Show IGMP querier state) 67

70 IGMP Router ports [<portlist>] [enableldisable] Set or show IGMP administrative router ports. (default: Show current router ports) IGMP Unregistered Flood [enableldisable] Set or show forwarding mode for unregistered (not-joined) IP multicast traffic. Will flood when enabled, and forward to router-ports only when disabled (default: Show current mode) Debug Commands Commands at Debug level: Debug Read Register <block> <subblock> <address> Debug Read Register <block> <subblock> <address> Read register address. <block> : Block identifier, 0-7 or 0x0-0x7. <subblock> : Sub block identifier: 0-15 or 0x0-0xf. <address> : Register address within block, or 0x00-0xff. 68

71 CE-Declaration of Conformity For the following equipment: 24 Ports Gigabit Web Smart Switch with 4 ports mini-gbic ALL4806W The safety advice in the documentation accompanying the products shall be obeyed. The conformity to the above directive is indicated by the CE sign on the device. of 89/336/EC. The Allnet ALL4806W conforms to the Council Directives This equipment meets the following conformance standards: EN55022:2006/A This equipment is intended to be operated in all countries. This declaration is made by ALLNET Computersysteme GmbH Maistraße Germering Germany Germering,